Interface Types - ZyXEL Communications ZyWALL USG 200 Series User Manual

Table 12 Zones, Interfaces, and Physical Ethernet Ports
Zones
(WAN, OPT, LAN,
DMZ)
Interfaces
(Ethernet,
VLAN,...)
Physical
Ethernet Ports
(P1, P2, ...)

6.2.1 Interface Types

There are many types of interfaces in the ZyWALL. In addition to being used in
various features, interfaces also describe the network that is directly connected to
the ZyWALL.
• Ethernet interfaces are the foundation for defining other interfaces and
network policies. You also configure RIP and OSPF in these interfaces.
• Port groups create a hardware connection between physical ports at the layer-
2 (data link, MAC address) level. Port groups are created when you use the
Interface > Port Roles screen to set multiple physical ports to be part of the
same (lan1, ext-wlan or dmz) interface.
• PPP interfaces support Point-to-Point Protocols (PPPoE or PPTP). ISP accounts
are required for PPPoE/PPTP interfaces.
• VLAN interfaces recognize tagged frames. The ZyWALL automatically adds or
removes the tags as needed. Each VLAN can only be associated with one
Ethernet interface.
• Bridge interfaces create a software connection between Ethernet or VLAN
interfaces at the layer-2 (data link, MAC address) level. Then, you can configure
the IP address and subnet mask of the bridge. It is also possible to configure
zone-level security between the member interfaces in the bridge.
• Virtual interfaces increase the amount of routing information in the ZyWALL.
There are three types: virtual Ethernet interfaces (also known as IP alias),
virtual VLAN interfaces, and virtual bridge interfaces.
• The auxiliary interface, along with an external modem, provides an interface
the ZyWALL can use to dial out. This interface can be used as a backup WAN
interface, for example. The auxiliary interface controls the AUX port.
ZyWALL USG 100/200 Series User's Guide
A zone is a group of interfaces and VPN tunnels. Use zones to apply
security settings such as firewall, IDP, remote management, anti-
virus, and application patrol. You can change the opt interface to be
part of a different zone.
Interfaces are logical entities that (layer-3) packets pass through.
Use interfaces in configuring VPN, zones, trunks, device HA, DDNS,
policy routes, static routes, HTTP redirect, and NAT.
Port roles combine physical ports into interfaces.
The physical port is where you connect a cable. In configuration, you
use physical ports when configuring port groups. You use interfaces
and zones in configuring other features.
Chapter 6 Configuration Basics
93